CV0-002 · Question #572
A cloud administrator notices three additional servers running in the company's account at a new public cloud provider. After a discussion with the development team, the administrator is unable to…
The correct answer is B. Migrate these servers to a different cloud region to reduce the impact to existing applications. When discovering unauthorized and undocumented servers, the best approach is to take steps that minimize immediate operational impact while enabling further investigation. Migrating these servers to a different cloud region allows for isolation without immediately shutting down…
Question
A cloud administrator notices three additional servers running in the company's account at a new public cloud provider. After a discussion with the development team, the administrator is unable to determine who deployed the servers, and a review of the change management board's minutes does not provide any additional insight. Which of the following is the BEST approach for the administrator to take?
Options
- ASubmit a change request to the change management board to add these servers.
- BMigrate these servers to a different cloud region to reduce the impact to existing applications.
- CMigrate these servers to the company's private cloud environment and disable the developer's
- DShut down these servers and enable the auditing service at the public cloud provider.
How the community answered
(30 responses)- A7% (2)
- B60% (18)
- C20% (6)
- D13% (4)
Why each option
When discovering unauthorized and undocumented servers, the best approach is to take steps that minimize immediate operational impact while enabling further investigation. Migrating these servers to a different cloud region allows for isolation without immediately shutting down potentially critical, albeit unknown, services.
Submitting a change request for unknown, possibly unauthorized, servers does not resolve the immediate governance and security concerns associated with their discovery.
Migrating unknown servers to a different cloud region can serve as a prudent initial step to isolate them from the main production environment without immediately causing a service outage. This approach allows the administrator to minimize potential disruption to any critical, yet undocumented, applications these servers might be supporting, while simultaneously providing time to thoroughly investigate their purpose and origin.
Migrating unknown servers to a private cloud and disabling developer accounts is an aggressive action that could cause significant outages if the servers are supporting critical, albeit undocumented, services.
Shutting down unknown servers immediately might disrupt undocumented critical services, and while enabling auditing is good, the immediate shutdown carries significant risk if the purpose of the servers is not yet understood.
Concept tested: Cloud resource governance and risk mitigation
Topics
Community Discussion
No community discussion yet for this question.